fix(script): Add anonymous as default value for crossOrigin (#39)

Co-authored-by: Sergiu D. <danalachisergiu@gmail.com>
Co-authored-by: Sergiu Danalachi <danalachi.sergiu@gmail.com>

Author: brdlyptrs

.github/actions/playwright/action.yaml

@@ -21,4 +21,4 @@ runs:
     - name: Setup playwright
       if: steps.cache-playwright-browsers.outputs.cache-hit != 'true'
       shell: bash
-      run: npx playwright install --with-deps
+      run: npx playwright install --with-deps

.github/actions/setup/action.yaml

@@ -9,4 +9,4 @@ runs:
     - name: Install dependencies
       uses: ./.github/actions/dependencies
     - name: Install playwright browsers
-      uses: ./.github/actions/playwright
+      uses: ./.github/actions/playwright

.nvmrc

@@ -1 +1 @@
-v18.16
+v20.13

README.md

@@ -38,7 +38,7 @@ const { response } = await hcaptcha.execute({ async: true });
 |-------------------|-------------|----------|------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------|
 | `loadAsync`       | Boolean     | No       | `true`                             | Set if the script should be loaded asynchronously.                                                                                                        |
 | `cleanup`         | Boolean     | No       | `true`                             | Remove script tag after setup.                                                                                                                            |
-| `crossOrigin`     | String      | No       | `-`                                | Set script cross origin attribute such as "anonymous".                                                                                                    |
+| `crossOrigin`     | String      | No       | `anonymous`                        | Set script cross origin attribute such as "anonymous".                                                                                                    |
 | `scriptSource`    | String      | No       | `https://js.hcaptcha.com/1/api.js` | Set script source URI. Takes precedence over `secureApi`.                                                                                                 |
 | `scriptLocation`  | HTMLElement | No       | `document.head`                    | Location of where to append the script tag. Make sure to add it to an area that will persist to prevent loading multiple times in the same document view. |
 | `secureApi`       | Boolean     | No       | `false`                            | See enterprise docs.                                                                                                                                      |

lib/__test__/script.test.ts

@@ -110,6 +110,7 @@ describe('fetchScript', () => {
       const [script] = nodes;
       expect(script.src).toMatch('https://js.hcaptcha.com/1/api.js');
       expect(script.async).toBeTruthy();
+      expect(script.crossOrigin).toEqual('anonymous');
       expect(script.id).toEqual(SCRIPT_ID);
     });
 

lib/src/script.ts

@@ -7,7 +7,7 @@ export function fetchScript({
   scriptLocation,
   query,
   loadAsync = true,
-  crossOrigin,
+  crossOrigin = 'anonymous',
   apihost = 'https://js.hcaptcha.com',
   cleanup = true,
   secureApi = false,

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hcaptcha/loader",
   "description": "This is a JavaScript library to easily configure the loading of the hCaptcha JS client SDK with built-in error handling.",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "author": "hCaptcha team and contributors",
   "license": "MIT",
   "keywords": [